拒绝服务攻击的分析和防范

The Analysis and Countermeasure of Denial of Service

由于现有网络体系结构和网络协议中的缺陷和弱点,以及多年来网络系统累积下了无数的漏洞,使得网络安全越来越成为人们关注的焦点。拒绝服务攻击是黑客攻击系统时经常用到的一种方法,黑客们正醉心于对它的研究,而无数的网络用户将成为这种攻击的受害者。拒绝服务攻击的手段很多,给研究者的分析、判定、防御和恢复造成了很大困难。该文从多个方面对拒绝服务攻击进行了剖析,预测了发展趋势,提出了系统的防御解决方案。同时还给不负责任或缺乏经验的网络管理员敲响了警钟,必须加强安全意识,不断提高和强化网络安全设施,维护网络安全是大家共同的职责。

Because of the vulnerability of the existing networking systems and the implementation bugs in the network protocol suite,network security attracts more and more attention.Denial of Service(DoS)is a common method used by hackers and lots of network systems are suffering such attacks.DoS attack contains several measures which bring much trouble in analysis,identification,countermeasure and recovery.This article analyzes the DoS from multi-aspects,forecasts its trend and brings up systematic countermeasures.Meanwhile,it provides advice to those network administrators,who are irresponsible or lack of experience.